European Union
European Commission has published guidance on upcoming new data protection rules
Brussels, 24 January 2018 – The Commission published the guidance to facilitate a direct and smooth application of the new data protection rules across the EU as of 25 May. The Commission also launches a new online tool dedicated to SMEs.
With just over 100 days left before the application of the new law, the guidance outlines what the European Commission, national data protection authorities and national administrations should still do to bring the preparation to a successful completion.
While the new regulation provides for a single set of rules directly applicable in all Member States, it will still require significant adjustments in certain aspects, like amending existing laws by EU governments or setting up the European Data Protection Board by data protection authorities. The guidance recalls the main innovations, opportunities opened up by the new rules, takes stock of the preparatory work already undertaken and outlines the work still ahead of the European Commission, national data protection authorities and national administrations.
Andrus Ansip, European Commission Vice-President for the Digital Single Market, said: “Our digital future can only be built on trust. Everyone’s privacy has to be protected. Strengthened EU data protection rules will become a reality on 25 May. It is a major step forward and we are committed to making it a success for everyone.”
Vĕra Jourová, Commissioner for Justice, Consumers and Gender Equality, added:” In today’s world, the way we handle data will determine to a large extent our economic future and personal safety. We need modern rules to respond to new risks, so we call on EU governments, authorities and businesses to use the remaining time efficiently and fulfil their roles in the preparations for the big day.”
Commission calls on EU governments and data protection authorities to be ready and provide support
Since the adoption of the General Data Protection Regulation in May 2016, the Commission has actively engaged with all concerned actors — governments, national authorities, businesses, civil society — to prepare the application of the new rules.
Preparations are progressing at various speeds across Member States. At this stage, only two of them have already adopted the relevant national legislation. Member States should speed up the adoption of national legislation and make sure these measures are in line with the Regulation. They should also ensure they equip their national authorities with the necessary financial and human resources to guarantee their independence and efficiency.
The Commission is dedicating EUR 1.7 million to fund data protection authorities, but also to train data protection professionals. A further EUR 2 million is available to support national authorities in reaching out to businesses, in particular SMEs.
New online tool supporting practical application
Knowledge of the benefits and opportunities brought by the new rules is not evenly spread. There is in particular a need to step up awareness and accompany compliance efforts for SMEs.
Today, the Commission launches a new practical online tool to help citizens, businesses, in particular SMEs, and other organisations to comply and benefit from the new data protection rules.
The Commission will also engage in events organised across the Member States to help the stakeholders in their preparation efforts and inform the citizens about the impact of the Regulation.
Recalling the main innovations and new opportunities
The General Data Protection Regulation enables the free flow of data across the Digital Single Market. It will better protect the privacy of Europeansand reinforce trust and security for consumers, while at the same time opening up new opportunities for businesses, especially smaller ones.
The guidance recalls the main elements of the new data protection rules:
- One set of rules across the continent, guaranteeing legal certainty for businesses and the same data protection level across the EU for citizens.
- Same rules apply to all companies offering services in the EU, even if these companies are based outside the EU.
- Stronger and new rights for citizens: the right to information, access and the right to be forgotten are strengthened. A new right to data portability allows citizens to move their data from one company to the other. This will give companies new business opportunities.
- Stronger protection against data breaches: a company experiencing a data breach, which put individuals at risk, has to notify the data protection authority within 72 hours.
- Rules with teeth and deterrent fines: all data protection authorities will have the power to impose fines for up to EUR 20 million or, in the case of a company, 4% of the worldwide annual turnover.
Next steps
In the run up to 25 May, the Commission will continue to actively support Member States, Data Protection Authorities and businesses to ensure the reform is ready to enter into effect. From May 2018 onward, it will monitor how Member States apply the new rules and take appropriate action as necessary. One year after the Regulation enters into application (2019) the Commission will organise an event to take stock of different stakeholders’ experiences of implementing the Regulation. This will also feed into the report the Commission is required to produce by May 2020 on the evaluation and review of the Regulation.
Background
On 6 April 2016, the EU agreed to a major reform of its data protection framework, by adopting the data protection reform package, comprising the General Data Protection Regulation (GDPR) replacing the twenty years old Directive. On 25 May 2018, the new EU-wide data protection rules will become applicable, two years after its adoption and entry into force.
In January 2017, the Commission proposed to align the rules for electronic communications (ePrivacy) with the new world-class standards of the EU’s General Data Protection Regulation. In September 2017, the Commission proposed a new set of rules to govern the free flow of non-personal data in the EU. Together with the already existing rules for personal data, the new measures will enable the storage and processing of non-personal data across the Union to boost the competitiveness of European businesses and to modernise public services. Both proposals still need to be agreed by the European Parliament and Member States.
Compliance Updates
THE EU AI ACT AND ITS IMPLICATIONS FOR THE IGAMING INDUSTRY
By: Danil Emelyanov, Head of AI Labs, Betby
First of all, the regulation of AI is inevitable. The EU was the first to step into this arena with the EU AI Act, setting a precedent that other parts of the world will likely follow. This proactive approach positions the EU as a leader in AI governance, but it also means that regions adopting similar regulations later might benefit from the lessons learned and adjustments made in response to early implementations.
The downside is that those who come last to the regulatory scene might indeed benefit the most. For instance, the competitive landscape in AI innovation currently favors new entrants in the US or UK over Europe, partly due to the stringent compliance requirements of the EU AI Act. This regulation could potentially affect the flow of investments into European AI ventures, making regions with more flexible or yet-to-be-defined regulations more attractive for AI start-ups and investors.
However, the positive aspect is the collaborative approach the EU has taken in drafting this legislation. It’s not a one-way mandate from legislators to businesses; rather, it involves dialogue and input from various stakeholders, including tech companies and open-source communities. Notably, there are exemptions for open-source AI models, likely influenced by contributions from French and German tech firms like Mistral and Aleph Alpha, which have been vocal about the importance of open-source innovation.
The AI Act predominantly focuses on regulating foundation models rather than classic machine learning models. The legislation sets a computational power threshold at 10^25 floating-point operations per second (FLOPS), below which AI systems are generally exempt from stringent regulations. This threshold implies that unless an organization is training a model on the scale of GPT-3.5 or larger, compliance concerns are minimal. This serves as a reminder of the value of simpler machine learning techniques like logistic regression and random forests, which can effectively solve business problems without the complexity and regulatory scrutiny of more advanced models.
For the iGaming industry, the implications of the EU AI Act are relatively manageable. Our legal teams will diligently study the law to ensure compliance, even if it means a slight reduction in the accuracy of our models. This cautious approach is necessary because the fines for non-compliance are substantial, ranging from 1.5% to 7% of global turnover, depending on the severity of the offense and the size of the company. Additionally, some aspects of the Act are vaguely defined, which could pose challenges in interpretation and application.
Despite these challenges, the iGaming sector should remain vigilant. Staying informed about regulatory updates and actively engaging with the regulatory process can help mitigate risks and ensure smooth compliance. The EU AI Act sets high standards for transparency, accountability, and ethical AI use, which, whilst demanding, also push the industry towards more responsible AI deployment.
Compliance Updates
EGBA Welcomes European Parliament’s Approval Of New EU Anti-Money Laundering Framework
The EU’s new anti-money laundering package aims to create a more consistent regulatory framework and will benefit online gambling operators by standardising AML rules and reporting requirements across member states.
Brussels, 24 April 2024 – The European Parliament has approved the EU’s new anti-money laundering (AML) package at its plenary sitting today, marking a significant milestone towards a new EU framework for combatting financial crime. The European Gaming and Betting Association (EGBA), representing Europe’s leading online gambling operators, welcomes the Parliament’s approval of the new AML package and believes the incoming rule changes will strengthen the EU’s approach to tackling money laundering.
The new package will contain:
- A single rulebook regulation – with provisions on conducting due diligence on customers, transparency of beneficial owners and the use of crypto-assets.
- The 6th Anti-Money Laundering Directive – containing national provisions on supervision and national AML authorities, as well as on the access of authorities to necessary and reliable information, e.g. beneficial ownership registers.
- The establishment of the European Anti-Money Laundering Authority (AMLA) – which have supervisory and investigative powers to ensure compliance with AML requirements, operating in conjunction with national AML authorities.
EGBA believes the new rules will benefit Europe’s online gambling operators by ensuring a consistent regulatory approach across EU member states. Another important feature, under the competence of AMLA, will be the creation of a harmonised reporting format for Suspicious Transaction Reports (STRs). This will ensure that Europe’s online gambling operators encounter the same STR requirements across all EU member states, thereby setting clear and consistent expectations that will reduce administrative burdens and costs.
To assist online gambling operators in complying with the EU’s new AML rules, EGBA has developed industry-specific guidelines on anti-money laundering which apply a risk-based approach and include practical measures that operators can take – on customer and business risk assessments, customer due diligence processes, suspicious transaction reporting, and record keeping. EGBA members already apply the guidelines and submit annual reports to EGBA that summarise their progress in implementing its measures. The guidelines are also open to all operators based in the EU and EGBA encourages operators to sign up to them.
The AML package now awaits formal adoption by the Council of the EU, expected in May, before being published in the EU’s Official Journal.
“We welcome the European Parliament’s approval of the new anti-money laundering package. The new framework will set high standards and ensure greater consistency in the application of AML rules across the EU. Online gambling operators, especially those operating in multiple countries, will benefit from a single rulebook and harmonised reporting requirements that will unravel national complexities. We will look to review our industry guidelines on AML to ensure their alignment with the new EU rules. By signing up to the guidelines, operators can already prepare themselves for the incoming changes in the EU rules and join our members in their efforts to proactively and positively contribute to the EU’s fight against money laundering.” – Dr. Ekaterina Hartmann, Director of Legal and Regulatory Affairs, EGBA.
Source: EGBA
Compliance Updates
European Union Updates Country List for Stricter AML Checks
The European Commission, the executive branch of the European Union (EU), has updated its list of high-risk countries, from which players should be subjected to stricter customer checks by gambling operators.
Based on Directive (EU) 2015/849, Article 9, the Commission identifies any high-risk third countries that have strategic deficiencies in their regime on anti-money laundering and countering the financing of terrorism.
As such, operators based in the EU that are offering services to these countries or dealing with players from these nations are obliged to carry out heightened vigilance checks.
The list was first published in July 2016 and has been updated a number of times as further countries of concern are identified and flagged by the Commission.
The latest countries to be added to this list – in an update published last month – include Burkina Faso, the Cayman Islands, Haiti, Jordan, Malo, Morocco, Myanmar, the Philippines, Senegal and South Sudan.
Other nations included on the list include Afghanistan, Barbados, Cambodia, the Democratic People’s Republic of Korea, Iran, Jamaica, Myanmar, Nicaragua, Pakistan, Panama, Syria, Trinidad and Tobago, Uganda, Vanuatu, Yemen and Zimbabwe.
-
Latest News2 days ago
Make every pixel personal: Opera GX facelift lets you match your browser to your setup down to the smallest detail
-
Latest News2 days ago
Casino Management System Market to Reach USD 29.09 Billion by 2032 | Enhanced Security and Operational Efficiency Drive Growth | Research by S&S Insider
-
Latest News2 days ago
Fast Track Celebrates Third Year as a Great Place to Work Certified™ Tech Company
-
Latest News7 days ago
Exploring the Strategic Benefits of Cashback Programs with Bojoko CEO Joonas Karhu
-
Africa4 days ago
South Africa: Tribunal Grants Lottoland Interim Relief – Orders Google to Grant Lottoland Access to its Advertising Platform
-
Financial reports7 days ago
SharpLink Gaming Announces Third Quarter 2024 Financial Results
-
Latest News2 days ago
ACR POKER ADDS BLITZ BONUS BOOST TO NOVEMBER CALENDAR AS $20 MILLION GTD WINTER OSS ENTERS FINAL DAYS
-
Latest News2 days ago
IBIA Upgrades Technology Platform to Strengthen Global Betting Integrity Efforts